# US 11,115,501 B2 · Gateway, client device and methods for facilitating communication between a client device and an application server > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,115,501 B2 - Document ID: US11115501B2 - Status: Granted - Kind: B2 - Application number: 14/899,301 - Filed: 2013-06-24 - Published: 2016-05-26 - Granted: 2021-09-07 - Earliest claimed: 2013-06-24 - Assignees: Telefonaktiebolaget LM Ericsson (publ) - Applicants: Telefonaktiebolaget L M Ericsson (publ) - Inventors: Patrik Salmela; Mohit Sethi - Web page: https://patentgrep.com/patent/US11115501B2 ## CPC - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04L 65/1104: Session initiation protocol [SIP] - H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)} - H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC] - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - H04W 8/183: {Processing at user equipment or user record carrier} - H04W 12/06: Authentication - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract It is presented a method, executed in a gateway, the gateway being arranged to facilitate communication between a client device and an application server. The method comprises the steps of: sending a request for an electronically transferable subscriber identity module, the request comprising an identifier based on an identity of the client device; receiving a response indicating that an electronically transferable subscriber identity module, generated based on the identifier, is available; downloading the electronically transferable subscriber identity; and storing the electronically transferable subscriber identity module with an association to the client device, along with any previously stored electronically transferable subscriber identity modules. A corresponding gateway, computer program and computer program product are also presented. ## Claims ### Claim 1 A method performed by a gateway for facilitating communication between a client device and an application server by obtaining and using a credential associated with the client device without the client device having to store the credential or provide the credential to the gateway, the method comprising: the gateway obtaining a message transmitted by the client device; after obtaining the message, the gateway sending a request for an electronically transferable subscriber identity module (SIM), the request comprising an identifier based on an identity of the client device; the gateway receiving a response indicating that the electronically transferable SIM, generated based on the identifier, is available; the gateway downloading the electronically transferable SIM; the gateway storing the downloaded electronically transferable SIM with an association to the client device, thereby associating the downloaded electronically transferable SIM with the client device, wherein the downloaded electronically transferable SIM comprises the credential; after downloading the electronically transferable SIM, the gateway receiving a client communication transmitted by the client device, wherein the client communication is destined for the application server; the gateway encrypting the received client communication that was transmitted by the client device using the downloaded electronically transferable SIM that is associated with the client device; and the gateway forwarding the encrypted client communication to the application server, wherein the gateway does not send the electronically transferable SIM to the client device. ### Claim 2 (depends on 1) The method according to claim 1, wherein the identifier is a Session Initiation Protocol Uniform Resource Identifier (SIP URI). ### Claim 3 (depends on 1) The method according to claim 1, wherein the request comprises a parameter indicating that the gateway is requesting a newly generated electronically transferable subscriber identity module. ### Claim 4 (depends on 1) The method according to claim 1, further comprising: the gateway obtaining the credential included in the electronically transferable SIM; and the gateway authenticating the client device with the application server using the obtained credential stored in the electronically transferable SIM. ### Claim 5 (depends on 1) The method according to claim 1, wherein the step of downloading comprises the gateway downloading only the electronically transferable SIM which is generated based on the identifier. ### Claim 6 (depends on 1) The method according to claim 1, wherein the step of downloading comprises the gateway downloading a plurality of electronically transferable subscriber identity modules associated with the gateway. ### Claim 7 (depends on 1) The method according to claim 1, wherein the electronically transferable SIM is in the form of an Internet Protocol Multimedia Services Identity Module (ISIM). ### Claim 8 (depends on 1) The method according to claim 1, further comprising, prior to sending the request, the gateway receiving a registration message from the client device comprising the identity of the client device. ### Claim 9 (depends on 8) The method according to claim 8, further comprising the gateway receiving a client connection request prior to downloading the electronically transferable subscriber identity module. ### Claim 10 (depends on 1) The method according to claim 1, further comprising the gateway receiving a client connection request prior to sending the request. ### Claim 11 (depends on 1) The method according to claim 1, further comprising the gateway revoking the electronically transferable subscriber identity module. ### Claim 12 A gateway for facilitating communication between a client device and an application server by obtaining and using a credential associated with the client device without the client device having to store the credential or provide the credential to the gateway, the gateway comprising: a processor; and a memory storing instructions that, when executed by the processor, enables the gateway to: after obtaining a message transmitted by the client device, send a request for an electronically transferable subscriber identity module (SIM) that is generated based on an identifier that is based on an identity of the client device, the request comprising the identifier based on the identity of the client device; download the electronically transferable SIM as a result of receiving a response indicating that the electronically transferable SIM is available, wherein the electronically transferable SIM was generated based on the identifier; store the downloaded electronically transferable SIM with an association to the client device, thereby associating the downloaded electronically transferable SIM with the client device, wherein the downloaded electronically transferable SIM comprises the credential; after downloading the electronically transferable SIM, receive a client communication transmitted by the client device, wherein the client communication is destined for the application server; encrypt the received client communication that was transmitted by the client device using the downloaded electronically transferable SIM that is associated with the client device; and forward the encrypted client communication to the application server, wherein the gateway is configured to not send the electronically transferable SIM to the client device. ### Claim 13 (depends on 12) The gateway according to claim 12, wherein the identifier is in the form of a Session Initiation Protocol Uniform Resource Identifier. ### Claim 14 (depends on 12) The gateway according to claim 12, wherein the request comprises a parameter indicating that the gateway is requesting a newly generated electronically transferable subscriber identity module. ### Claim 15 (depends on 12) The gateway according to claim 12, wherein the gateway is configured to obtain the credential included in the electronically transferable SIM and authenticate the client device using based on the obtained credential. ### Claim 16 (depends on 12) The gateway according to claim 12, wherein the gateway is configured such that, as a result of receiving the response, the gateway downloads only the electronically transferable subscriber identity module. ### Claim 17 (depends on 12) The gateway according claim 12, wherein the gateway is configured such that, as a result of receiving the response, the gateway downloads a plurality of electronically transferable subscriber identity modules including the requested electronically transferable subscriber identity module. ### Claim 18 (depends on 12) The gateway according to claim 12, wherein the electronically transferable SIM is in the form of an Internet Protocol Multimedia Services Identity Module. ### Claim 19 (depends on 12) The gateway according to claim 12, wherein the gateway is configured to send the request after receiving a registration message from the client device comprising the identity of the client device. ### Claim 20 (depends on 19) The gateway according to claim 19, wherein the gateway is configured such that the gateway downloads the electronically transferable SIM as a result of receiving a client connection request. ### Claim 21 (depends on 12) The gateway according to claim 12, wherein the gateway is configured to send the request after receiving a client connection request. ### Claim 22 (depends on 12) The gateway according to claim 12, wherein the gateway is operable to revoke the electronically transferable subscriber identity module. ### Claim 23 A computer program product for facilitating communication between a client device and an application server by obtaining and using a credential associated with the client device without the client device having to store the credential or provide the credential to a gateway, the computer program product comprising a non-transitory computer readable medium storing computer program code which, when run on the gateway, causes the gateway to: after obtaining a message transmitted by the client device, send a request for an electronically transferable subscriber identity module (SIM) that is generated based on an identifier that is based on an identity of the client device, the request comprising the identifier based on the identity of the client device; download the electronically transferable SIM as a result of receiving a response indicating that the electronically transferable SIM is available, wherein the electronically transferable SIM was generated based on the identifier; store the downloaded electronically transferable SIM with an association to the client device, thereby associating the downloaded electronically transferable SIM with the client device, wherein the downloaded electronically transferable SIM comprises the credential; after downloading the electronically transferable SIM, receive a client communication transmitted by the client device, wherein the client communication is destined for the application server; encrypt the client communication using the electronically transferable SIM; and forward the encrypted client communication to the application server, wherein the gateway is configured to not send the electronically transferable SIM to the client device. ### Claim 24 (depends on 23) The computer program product according to claim 23, wherein the request comprises a parameter indicating that the gateway is requesting a newly generated electronically transferable subscriber identity module. ### Claim 25 (depends on 1) The method of claim 1, wherein the message is a connection request destined for the application server, and the content of the message triggers the gateway to send the request for the electronically transferable SIM. ### Claim 26 (depends on 1) The method of claim 1, wherein the message is a connection request destined for the application server, after forwarding the connection request to the application server, the gateway receives a response message transmitted by the application server in response to the connection request, and the content of the response message triggers the gateway to send the request for the electronically transferable SIM. ### Claim 27 (depends on 1) The method of claim 1, wherein the message is a connection request destined for the application server, and the method further comprises, after downloading the electronically transferable SIM, forwarding to the application server a message comprising the connection request and the credential. ### Claim 28 A method performed by a gateway for facilitating communication between a client device and an application server, the method comprising: the gateway storing a set of two or more subscriber identity modules (SIMs); after storing the SIMs, the gateway receiving a message transmitted by the client device; after receiving the message, the gateway determining whether any of the SIMs included in the set of SIMs is free to be used in connection with the client device; the gateway selecting a free SIM from the set of SIMs; the gateway assigning the selected SIM to the client device; after assigning the selected SIM to the client device, the gateway receiving a client communication transmitted by the client device, wherein the client communication is destined for the application server; the gateway encrypting the received client communication that was transmitted by the client device using the SIM assigned to the client device; and the gateway forwarding the encrypted client communication to the application server, wherein the gateway does not send the SIM to the client device.